Scammers now use AI to clone voices, write convincing messages, and impersonate officials, banks, and family members. The tricks are more polished, but the best defenses are still simple habits. This guide explains how AI-powered scams work, what the latest US and India data shows, and a practical checklist to protect your online payments.
Quick Answer
To protect your online payments from AI-powered scams: never act on urgent payment demands, verify who is contacting you through an official channel you look up yourself, never share OTPs or PINs, use strong sign-in such as passkeys or two-step verification, and turn on transaction alerts and limits. If you have been scammed, contact your bank immediately and report it: in India call 1930 or use cybercrime.gov.in, and in the US report to IC3.gov.
Table of Contents
- How AI changes scams
- What the latest data shows
- Common AI-powered scams
- The protection checklist
- Extra tips for UPI and mobile payments
- Protecting family and older relatives
- If you have been scammed
- Common mistakes
- FAQ
- Sources
How AI Changes Scams
AI does not create new goals for scammers. It makes the old ones cheaper and more convincing:
- Better writing: messages without the spelling mistakes that used to give scams away.
- Voice cloning: a short audio clip can be used to imitate a relative, boss, or official.
- Deepfake images and video: fake video calls, fake endorsements, and fake IDs.
- Scale: one scammer can run many personalized conversations.
The FBI's 2025 Internet Crime Report names voice cloning, deepfake images and videos, and AI-generated scripts among the tools used in romance scams, kidnapping and extortion calls, fake influencers, government impersonation, and business email compromise.
What the Latest Data Shows
United States
| Measure | Figure | Source |
|---|---|---|
| AI-related complaints (2025) | 22,364 complaints with reported losses of about $893 million | FBI 2025 Internet Crime Report, as reported by Malwarebytes (June 2026) |
| Average loss per AI-related complaint | Roughly $40,000 (our arithmetic: $893,346,472 divided by 22,364) | Derived |
| Total reported fraud losses (2025) | $15.9 billion, up from more than $12 billion the prior year | FTC testimony of March 25, 2026, as reported by Crowdfund Insider |
| Fraud reports | About 3 million, up from 2.6 million | FTC Consumer Sentinel |
| Imposter scams | More than 1 million complaints and more than $3.5 billion in losses | FTC |
| Investment fraud | $7.9 billion, the largest loss category | FTC |
Context: the FBI figure covers only complaints that were filed and identified as AI-related, so it likely understates the real total. We cannot say how much of the FTC's total involved AI.
India
BioCatch's India report, covered by Business Today in July 2026, found over the past year:
- Text-message-based scams up 146 percent.
- The value of attempted fraudulent payments up 35 percent, even though attempted fraud sessions fell 12 percent. That suggests fewer but larger attempts.
- Mobile fraud sessions up 67 percent.
- Money mule activity: more than 8.5 lakh mule accounts detected in 2025, and 26.48 lakh mule-linked cyber-fraud cases involving Rs 22,496 crore. A suspect registry prevented Rs 9,055 crore in transactions.
The report also noted that the Indian Cyber Crime Coordination Centre (I4C) and the Reserve Bank Innovation Hub are working together to use AI to identify mule accounts. The article did not give an overall UPI fraud total, so we do not quote one.
Common AI-Powered Scams
| Scam | How it works | Warning signs |
|---|---|---|
| Family emergency voice scam | A cloned voice calls claiming a relative is in trouble and needs money now | Panic, secrecy, payment by transfer, gift cards, or crypto |
| Impersonation of officials ("digital arrest") | Callers pose as police, CBI, tax, or customs officers, move to a video call, and demand money to "clear your name" | Threats of arrest, video-call interrogation, demands for payment |
| Fake bank or customer support | A call or message says your account is at risk and asks for OTPs, PINs, or app installs | Urgency, requests for codes, remote-access apps |
| Boss or vendor impersonation | A message or voice that looks like a senior colleague or supplier asks for an urgent payment or changed bank details | New account details, pressure, bypassing normal approval |
| Fake investment and celebrity endorsements | Deepfake videos or ads push a "guaranteed return" scheme | Guaranteed returns, pressure to deposit quickly, unlicensed platforms |
| Romance and relationship scams | AI-written chats and fake photos build trust before asking for money | Never meeting on video, then emergencies that need money |
India's I4C advisory states that legitimate officials do not make demands over video calls, and urges people to report suspicious activity through the national cybercrime helpline or portal.
The Protection Checklist
1. Slow down
Urgency is the scammer's main tool. A real bank, official, or relative will still be there in ten minutes. Hang up, breathe, and verify.
2. Verify through a channel you choose
Do not trust the number or link that contacted you. Call the number on the back of your card, the official website you type yourself, or a relative's saved number.
3. Never share secrets
Do not share OTPs, PINs, passwords, card details, or recovery codes with anyone, including someone who says they work for your bank.
4. Use a family or team code word
Agree a private word to confirm identity in an emergency call. A cloned voice will not know it.
5. Be wary of remote-access apps
Never install an app or click a link because a caller told you to. Remote-access tools can give scammers control of your phone or computer.
6. Secure your accounts
Use passkeys or two-step verification and a unique password for each account. Our guide to passkeys explains how to switch.
7. Set limits and alerts
Turn on transaction alerts, set daily transfer limits where your bank allows it, and consider a separate account with a small balance for everyday online payments.
8. Check before you pay
Confirm the recipient's name, number, and account details. For businesses, require a second person to approve any change to payment details, confirmed by a phone call to a known number.
9. Limit what scammers can copy
The FBI advises limiting the voice and video content you share publicly. Review privacy settings on social media.
10. Treat guaranteed returns as a red flag
No legitimate investment can guarantee high returns. Check that a platform is licensed with your country's regulator before sending money.
Extra Tips for UPI and Mobile Payments
- You never need your UPI PIN to receive money. If a request asks you to enter your PIN to "receive" a payment, it is a scam.
- Check "collect" requests carefully. Decline anything you did not initiate.
- Be careful with QR codes. Scanning a QR code is for paying, not receiving.
- Beware of fake job offers. The BioCatch report notes that scammers recruit money mules through fake job offers and social media. Letting your account be used to move money for someone else can get you into trouble.
- Download payment apps only from official app stores and keep them updated.
For context on the scale of digital payments in India, see India's digital economy in 2027.
Protecting Family and Older Relatives
- Talk about voice-cloning and "digital arrest" scams before they happen.
- Agree a code word and a rule: "We never send money on a call alone. We hang up and call back."
- Help set up alerts and limits on their accounts.
- Make it easy to ask for help without embarrassment.
If You Have Been Scammed
- Contact your bank or payment provider immediately. Ask them to block or flag the transaction and secure your accounts.
- Report quickly. In India, call the national helpline 1930 and file a report at cybercrime.gov.in. In the US, report to IC3.gov, and to the FTC.
- Change passwords and sign out of devices if you shared access or installed an app.
- Keep evidence. Save messages, numbers, screenshots, and transaction details.
- Do not pay "recovery" fees. Fake recovery services target scam victims.
Speed matters, so do not wait because you feel embarrassed. Scams are organized crime, and anyone can be targeted.
Common Mistakes
- Trusting caller ID or a familiar voice. Both can be faked.
- Verifying through the contact details the caller gave you. Use your own.
- Keeping a scam secret. Scammers often tell victims not to tell anyone. That is a warning sign.
- Using the same password everywhere. One leak can open many accounts.
- Assuming you are too smart to be fooled. Well-crafted scams catch careful people.
Expert Tips
- Practice a one-line script: "I will call you back on the official number."
- For businesses, require two-person approval and a call-back for any payment change.
- Review your bank statements weekly, not just monthly.
Frequently Asked Questions
Can scammers really clone my voice?
The FBI lists voice cloning among the AI tools used in scams. Because a voice can be faked, rely on verification steps rather than how someone sounds.
How do I know a video call is real?
You cannot rely on seeing a face. Verify through a separate, trusted channel, and remember that real officials do not demand payment over video calls.
Is it safe to use UPI?
UPI is widely used and has built-in protections, but scams target users, not the system. Never share your PIN or OTP, and be careful with collect requests and QR codes.
What is a money mule?
A person whose bank account is used to move stolen money. Scammers often recruit them with fake job offers. It can create legal trouble for the account holder.
Where do I report fraud in India?
Call 1930 or use cybercrime.gov.in, and inform your bank immediately.
Where do I report fraud in the US?
Report to your bank, to IC3.gov, and to the FTC.
Conclusion
AI has made scams more convincing, but the defenses remain simple and effective: slow down, verify independently, protect your codes, secure your accounts, and report fast. Share these habits with your family and your team, because one verified phone call can stop a large loss.
Offer security or payment tools? See our sponsored posts page or contact us.
Sources
- Malwarebytes: Americans lost nearly $900 million to AI-powered scams, FBI says (June 2026)
- Crowdfund Insider: US FTC reports $15.9 billion in consumer fraud losses (March 2026)
- Business Today: What a new report says about India's digital banking frauds (BioCatch, July 2026)
- Vajiram and Ravi: Digital arrest scams and the I4C advisory (November 2025)
FBI and FTC figures are as reported by the secondary sources above. The practical tips reflect widely used consumer-safety guidance, such as the UPI PIN rule, and are not a substitute for advice from your bank or authorities. If you are a victim of fraud, contact your bank and local authorities immediately.
